Mistral AI has acquired Paris-based cloud startup Koyeb, marking the model-maker’s first acquisition and entry into the enterprise infrastructure market. This suggests a strategic shift for the French company, which has built its reputation on frontier models but is now investing heavily in compute capabilities and expanded deployment options. The acquisition folds Koyeb’s serverless deployment

Critical and high-severity vulnerabilities were found in four widely used Visual Studio Code extensions with a combined 128 million downloads, exposing developers to file theft, remote code execution, and local network reconnaissance. Application security company OX Security published the findings this week, saying it had begun notifying vendors in June 2025 but received no response

GitHub is readying a new feature to automate some of the most expensive work in DevOps: the invisible housekeeping no one wants to own. Developers would rather be building features than debugging flaky continuous integration (CI) pipelines, triaging low-quality issues, updating outdated documentation, or closing persistent gaps in test coverage. In order to help developers

The Eclipse Foundation has released the final version of GlassFish 8, an update of its enterprise Java application server. The new release serves as a compatible implementation of the Jakarta EE 11 Java platform and accommodates Jakarta Data repositories for simplifying data access, according to GlassFish development participant OmniFish. Virtual threads support for scalable concurrency

Coders are understandably complaining about AI coding problems, with the technology often delivering what’s become known as “AI slop,” but their concerns are signaling a more strategic issue about how enterprises calculate coding ROI. The issues, according to IT analysts and consultants, go far beyond vastly faster production of code accompanied by the kinds of

The WinterCG community group was recently promoted to a technical committee, signaling a growing maturity for the standard that aims to solidify JavaScript runtimes. Now is good time to catch up with this key feature of modern JavaScript and the web development landscape. The WinterTC manifesto To understand what WinterTC is about, we can begin

Is your generative AI application giving the responses you expect? Are there less expensive large language models—or even free ones you can run locally—that might work well enough for some of your tasks? Answering questions like these isn’t always easy. Model capabilities seem to change every month. And, unlike conventional computer code, LLMs don’t always

Nearly a year ago, I wrote an article titled “How to pick the right SAST tool.” It was a look at the pros and cons of two different generations of static application security testing (SAST): Traditional SAST (first generation): Deep scans for the best coverage, but creates massive friction due to long run times. Rules-based

Pressure is building on Oracle to loosen its grip on MySQL, with a group of database veterans, developers, and long-time contributors urging the company to transition the open source database to an independent foundation model. The call, articulated in an open letter, reflects mounting concern about MySQL’s development velocity, roadmap transparency, and role in an

For engineers building high-concurrency applications in e-commerce, fintech or media, the “200ms limit” is a hard ceiling. It is the psychological threshold where interaction feels instantaneous. If a personalized homepage, search result or “Up Next” queue takes longer than 200 milliseconds to load, user abandonment spikes. There is a famous study from Amazon showing that